|
Integrator Notes
| • | 'Servers that you deploy your production application on must have a hardware firewall. The processes for setting the firewall must be documented and the firewall settings must be reviewed and tested on a quarterly basis. |
| • | Per PCI-DSS 1.3.8, install perimeter firewalls between any wireless networks and the cardholder data environment, and configure these firewalls to deny any traffic from the wireless environment or from controlling any traffic (if such traffic is necessary for business purposes) |
| • | Per PCI-DSS 1.3.9, install personal firewall software on any mobile and employee-owned computers with direct connectivity to the Internet (for example, laptops used by employees), which are used to access the organization’s network. |
|